topic Re: Security Policy to block Dropbox in General Topics

Security Policy to block Dropbox

kuntzelectroplating — Thu, 16 Aug 2012 15:55:18 GMT

I have created a security policy to block Dropbox traffic, but so far it is not working. In my policy I have chosen:

Source: Destination Zone: User: Destination Address: Application: Service: Action;

trust untrust Me (as a test) dropbox.com, compute-1.amazonaws.com DropBox Any Deny

Am I missing something?

Thanks

Re: Security Policy to block Dropbox

zarina — Thu, 16 Aug 2012 20:31:26 GMT

What are the IPs listed in the destination address? Please look at your traffic log which indicates allow for dropbox and make sure to include the destination IPs in the destination address. I would rather leave this address as 'any'. When you see the traffic passing through, is it allowed through the rule that is above the deny rule?

Re: Security Policy to block Dropbox

kuntzelectroplating — Fri, 17 Aug 2012 00:57:52 GMT

I have found the IP range from the logs and added them as the destination instead. When I look at the logs my rule which is 2nd from the top is passed by and an Internet access rule further donw my list is the one allowing Dropbox access out. So my rule is being bypassed.

I am stumped at why my rule is being ignored.

I am open to suggestions.

Thanks

Re: Security Policy to block Dropbox

kuntzelectroplating — Fri, 17 Aug 2012 12:43:14 GMT

Solved. I changed the destination address to "any". That was the ticket.